Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa
File: a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa (raw, json)
Hash identifier: O57j2YjUBGdSY5n/v+ZmvCw0+3qyw+85zD+gqeKcKPQ=
Subject key identifier: 70:D0:14:8A:E4:EE:93:50:54:46:68:59:07:A6:5D:8B:02:5A:A2:44
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 699605C7BF108DADDB6DD0395D3E003593DCBA3B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 193.202.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:96:05:c7:bf:10:8d:ad:db:6d:d0:39:5d:3e:00:35:93:dc:ba:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=928e6f23fe98b7bba91f0e47b0fb3611725cef35be81d34044b57d837b80a2fb, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:f3:90:6f:44:98:af:62:97:86:3b:46:ed:
53:e7:ba:bd:84:e0:46:5f:a7:7a:67:d4:39:d7:ec:
b1:34:cf:f7:df:2c:1a:e3:9c:30:26:ed:0b:b6:51:
63:66:9f:73:c5:5d:10:9f:b8:ec:0c:c9:38:6e:f2:
b8:3f:62:5f:6b:7a:09:13:c3:f9:61:d0:47:5d:bc:
a5:25:27:6e:f9:d0:a6:c4:ce:36:e8:49:02:a4:83:
c4:f5:07:eb:a2:47:0a:80:8b:d2:6a:3d:a4:0a:90:
1c:f4:2f:01:c6:83:28:27:53:3f:21:6f:ff:c7:80:
28:d1:f6:67:11:85:d3:8f:61:11:35:15:8a:d8:e8:
83:92:1d:b8:fe:6f:95:ae:21:f0:e2:9b:c8:fd:0a:
12:f3:29:f7:1c:c5:60:6e:ec:26:72:52:be:f4:52:
76:e4:6e:c3:60:36:6a:80:d5:86:c9:4f:36:a5:36:
da:f4:d6:e6:40:63:73:34:b5:2d:7d:52:70:c6:c9:
16:fa:80:23:12:cc:74:9c:29:e8:57:27:ab:9f:05:
49:9e:44:16:59:0b:8b:07:cc:8a:d6:ad:74:1c:94:
bf:a8:30:d2:1a:ce:c7:6a:3b:d2:fb:ef:03:41:1f:
25:56:e4:be:e5:b1:d0:a1:22:ca:b0:f8:03:a7:a8:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D0:14:8A:E4:EE:93:50:54:46:68:59:07:A6:5D:8B:02:5A:A2:44
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.192.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:ee:32:48:88:dc:b7:c9:50:76:27:c7:84:d8:cd:d7:cc:c6:
bd:14:12:a6:44:e2:f4:97:6d:db:0d:25:09:ec:b9:84:93:6c:
02:8b:00:d5:d9:0f:23:ae:4c:e7:4d:df:ed:aa:a4:88:14:1f:
02:ae:37:6e:5b:fc:a6:77:49:44:5d:58:a5:1c:04:fe:3b:3e:
9c:7b:3b:3b:b6:66:94:8c:6e:9d:63:f0:a8:61:ae:20:6a:fb:
72:cd:c0:ee:39:78:6f:e9:97:6d:4f:73:3e:30:5c:e2:10:15:
74:1b:82:03:13:fd:09:14:de:3c:6f:cb:7e:47:be:58:6c:e2:
fd:a9:5d:bb:3d:47:86:9f:25:9d:ad:71:45:2f:32:fc:1b:8b:
e2:7f:f8:a0:97:82:04:68:75:85:a6:62:49:8e:27:8e:92:ad:
79:70:d9:b7:49:7d:1f:df:5f:55:19:6b:ee:f9:c7:1f:0d:c5:
a5:47:b2:2b:bc:31:a0:30:86:41:4b:bd:0e:3b:84:97:4d:25:
7a:e9:2d:d9:61:a6:78:ee:92:b3:b0:9a:3f:a6:2d:2f:37:bc:
3d:10:6e:53:da:1d:3c:92:94:2c:f1:97:b7:7b:6f:28:40:61:
76:6b:ee:5d:61:3f:ef:2c:90:03:f7:9e:32:e2:5d:7f:01:fe:
71:bc:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:42 2024 by rpki-client on console-fra.rpki-client.org